CVE-2022-27666
HIGHLinux Kernel < 5.17 - Out-of-Bounds Write
Title source: ruleDescription
A heap buffer overflow flaw was found in IPsec ESP transformation code in net/ipv4/esp4.c and net/ipv6/esp6.c. This flaw allows a local attacker with a normal user privilege to overwrite kernel heap objects and may cause a local privilege escalation threat.
Exploits (3)
References (5)
Scores
CVSS v3
7.8
EPSS
0.0080
EPSS Percentile
74.1%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Details
CWE
CWE-787
Status
published
Products (17)
debian/debian_linux
9.0
debian/debian_linux
10.0
debian/debian_linux
11.0
fedoraproject/fedora
34
fedoraproject/fedora
35
linux/linux_kernel
5.17 (8 CPE variants)
linux/linux_kernel
< 5.17
netapp/h300e_firmware
netapp/h300s_firmware
netapp/h410c_firmware
... and 7 more
Published
Mar 23, 2022
Tracked Since
Feb 18, 2026